Security Engineer

Who we are

The world’s leading humanitarian, development and global health organizations rely on Ona to improve their impact and accountability. We build technology that affords new opportunities for governments and development organizations and actors to be increasingly collaborative, data-driven, and accountable to the people they serve. We also make tools that provide opportunities for organizations to make better use of their data to help address some of the world’s greatest challenges, including: maternal and child health, education, community resilience, agriculture, environmental sustainability, access to infrastructure and government accountability.

Ona works with its partners to design data solutions based on technologies Ona develops. These include Ona Data (ona.io) - a mobile data collection and visualization platform, Canopy - our enterprise analytics solution and OpenSRP (smartregister.org) a mobile health platform Ona is developing with the World Health Organization and other partners.

Purpose

There's no such thing as a "safe system" - only safer systems. Our Site Reliability Engineering team works to create and maintain the safest operating environment for Ona's users and developers. 

Key role and responsibilities

• As a Security Engineer, you will write code to protect network boundaries, keep computer systems and network devices hardened against attacks.
• Write code for our deployment systems that actively monitors our systems for attacks and intrusions. 
• Also work with software engineers to proactively identify and fix security flaws and vulnerabilities.
• This role will report to the Site Reliability Engineering team.

Key requirements

Essential

• Bachelor's degree or equivalent practical experience.
• Some experience analyzing the security of systems (at least one of penetration testing, Web Application security testing, vulnerability scanning, threat modeling, etc.)
• Experience with concepts and practices such as data anonymization and classification, auditing access to data, and review of requests for data access.
• Experience in responding to security problems in target-rich environments, looking at security alerts, front-line analysis and response.
• Experience coding/scripting in one or more general purpose languages including but not limited to: Java, C/C++, C#, Objective C, Python, JavaScript and/or Go.
• 3 years of experience in this or a related role

Desirable 

• Experience with developing or analyzing Android applications
• Code maintenance and review experience in one or more general purpose languages.
• Understanding of technical privacy issues (cookie management, encryption), and experience with the software development lifecycle.

To apply

Kindly send the following 

• Note describing why you are interested in working for Ona. 
• Current resume.
• Portfolio  of your work e.g.  a link link to your GitHub page, projects you've completed, or your website.
• (Bonus points) Build something cool using our API, or extend some software we've written.

Note we will only contact shortlisted candidates.